CVE-2018-20450

The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...

CVE-2018-20450

CVE-2018-20450 : In libxls 1.4.0, the read_MSAT function in ole.c has a double-free vulnerability, allowing denial of service (application crash) via a crafted XLS file. This is a separate issue from CVE-2017-2897. Connected sources confirm the affected component and impact, with remediation guid...